计算机科学与探索 ›› 2021, Vol. 15 ›› Issue (9): 1667-1679.DOI: 10.3778/j.issn.1673-9418.2006103

• 网络与信息安全 • 上一篇    下一篇

去中心基于属性Σ协议的一般性构造及其应用

杨晓莉,黄振杰   

  1. 1. 闽南师范大学 福建省粒计算及其应用重点实验室,福建 漳州 363000
    2. 闽南师范大学 计算机学院,福建 漳州 363000
  • 出版日期:2021-09-01 发布日期:2021-09-06

Generic Construction of Decentralized Attribute-Based Σ-Protocol and Its Applications

YANG Xiaoli, HUANG Zhenjie   

  1. 1. Fujian Key Laboratory of Granular Computing and Application, Minnan Normal University, Zhangzhou, Fujian 363000, China
    2. School of Computer Science, Minnan Normal University, Zhangzhou, Fujian 363000, China
  • Online:2021-09-01 Published:2021-09-06

摘要:

基于属性密码因能提供细粒度访问控制和良好的隐私性而成为密码学的研究热点之一。[Σ]协议是一种三轮公开抛硬币诚实验证者零知识证明协议,在密码学的许多领域有重要应用。首先,将基于属性密码引入到零知识证明领域,研究基于属性[Σ]协议,给出其定义,刻画其安全模型;其次,基于标准[Σ]协议、陷门可取样关系和平滑秘密共享方案,给出一个去中心基于属性[Σ]协议的一般性构造和相应的例子,并证明其安全性;最后,作为去中心基于属性[Σ]协议的应用,利用Fiat-Shamir转换,得到去中心基于属性签名和去中心基于属性双层签名的一般性构造和相应的例子。效率分析表明,基于属性双层签名方案相比已有的方案在数据长度和计算开销两方面都具有显著的优势。

关键词: &Sigma, 协议;去中心基于属性&Sigma, 协议;去中心基于属性签名;去中心基于属性双层签名;一般性构造

Abstract:

Attribute-based cryptography becomes one of the hot topics in cryptography, since it can provide fine-grained access control and good privacy. Σ-protocol is a 3-move public-coin honest verifier zero-knowledge proof protocol, and has important applications in many fields of cryptography. Firstly, combining the concept of attribute-based cryptography with the zero-knowledge proof, a notion of attribute-based Σ-protocol is introduced with its formal security model. Secondly, based on the standard Σ-protocol, the trapdoor samplable relation and the smooth secret sharing, a general construction of decentralized attribute-based Σ-protocol and corresponding scheme are proposed with the proofs of its securities. Finally, as the applications of decentralized attribute-based Σ-protocol, general constructions of decentralized attribute-based signature and decentralized attribute-based two-tier signature are presented by Fiat-Shamir transformation, respectively. Some concrete schemes are also presented. Performance analysis shows that the proposed attribute-based two-tier signature scheme has obvious advantages in both sizes and computation costs compared with existing schemes.

Key words: Σ-protocol, decentralized attribute-based Σ-protocol, decentralized attribute-based signature, decentralized attribute-based two-tier signature, generic construction